17ee9bd7f63bb8cbe89868c56ffaa903_JaffaCakes118

General

Target

17ee9bd7f63bb8cbe89868c56ffaa903_JaffaCakes118
Size

148KB
MD5

17ee9bd7f63bb8cbe89868c56ffaa903
SHA1

2f1788404d54807135ba130cabdb0bb7fa4c595c
SHA256

bd476c63e9bfa695dc988ad78f247252a0ca74542a4b9b04ab71c264639e9d07
SHA512

5a185ef952b2fea2a729f550e4a5b87e20cdb625e9abcdd3b92472e1bc65d3418128c02f66d65e60824d466471a55790205388b6eae1fe2ee5a32094f9448534
SSDEEP

3072:gx4ulDHRSjlegvdQg4syOZBX5lgg8b9DeYt/yHB6:gt9gvdD4hiBXDggClUh6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17ee9bd7f63bb8cbe89868c56ffaa903_JaffaCakes118

Files

17ee9bd7f63bb8cbe89868c56ffaa903_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3ea634faff77c742701721da8aaae90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadProcessMemory
GetThreadContext
GetProcAddress
GetModuleHandleA
TerminateProcess
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualProtectEx
VirtualAlloc
GetTickCount
Sleep
CreateThread
lstrcpyA
FindClose
FindNextFileA
lstrcmpA
FindFirstFileA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
LoadLibraryA
GetTempPathA
GetCurrentProcessId
ExitProcess
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetCurrentProcess
CloseHandle
HeapFree
GetProcessHeap
HeapAlloc
CreateFileA
GetLastError
lstrlenA
WriteFile
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSection
GetACP
GetOEMCP
GetCPInfo
HeapSize
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringA

user32

wsprintfA
LoadIconA

shell32

ShellExecuteA

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3ea634faff77c742701721da8aaae90

Headers

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 108KB - Virtual size: 112KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 108KB - Virtual size: 112KB

.rsrc
Size: 4KB - Virtual size: 1KB